$ rpki-client -vvf repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.mft File: FCA55FE68BF147AE20F00C45DADCDF960C120CF8.mft (raw, json) Hash identifier: Y7PgAiHjQ3nUfXI43VwOlX7229Cpx/6RcFKZvS66Ubs= Subject key identifier: 79:1D:E9:35:3B:A0:A3:B7:36:77:78:41:F2:42:F3:37:E1:6E:B5:EF Authority key identifier: FC:A5:5F:E6:8B:F1:47:AE:20:F0:0C:45:DA:DC:DF:96:0C:12:0C:F8 Certificate issuer: /CN=FCA55FE68BF147AE20F00C45DADCDF960C120CF8 Certificate serial: 41997A3E2F217AF8D9D9373532F54B34FEBC76 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.mft Manifest number: 0185 Signing time: Sun 15 Jun 2025 10:02:07 +0000 Manifest this update: Sun 15 Jun 2025 09:57:07 +0000 Manifest next update: Wed 18 Jun 2025 10:07:07 +0000 Files and hashes: 1: FCA55FE68BF147AE20F00C45DADCDF960C120CF8.crl (hash: 8eanJCFxFAhWyn06F/eXLFwv0IVjiZCi9Zu7xv4hucY=) 2: 3130332e3132312e3234362e302f32332d3234203d3e20313335343738.roa (hash: Fa70W79FWJwGU7udTAwUgPXNTPP4kX8Q9MJvZfIXGU4=) 3: 3130332e3132312e3234342e302f32332d3234203d3e20313335343738.roa (hash: mb2pM5mXThua6WdA1EeTpxCUj69c6y3IginfkESyKCw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.crl rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 10:07:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:99:7a:3e:2f:21:7a:f8:d9:d9:37:35:32:f5:4b:34:fe:bc:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCA55FE68BF147AE20F00C45DADCDF960C120CF8 Validity Not Before: Jun 15 09:57:07 2025 GMT Not After : Jun 18 10:07:07 2025 GMT Subject: CN=791DE9353BA0A3B736777841F242F337E16EB5EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d1:c7:a9:5f:78:c7:4e:ef:f4:16:bd:34:c6: d2:88:c5:54:3b:bc:a6:1a:79:47:57:b3:2e:43:bb: fd:2d:04:ab:4f:bb:1e:4c:a2:74:57:ad:0f:e5:53: 55:8d:ef:46:81:63:ed:70:1e:28:51:ae:a6:dd:04: 45:c1:1d:0c:c7:4c:36:83:1b:87:cc:47:29:98:03: 8e:16:33:aa:01:0d:ec:49:ce:9a:6d:da:14:d3:1a: 6c:d6:ca:04:ec:b1:b9:44:69:2d:1c:c9:c5:fc:04: 51:54:48:7e:d4:1b:b9:28:7b:b5:d3:35:78:28:55: 7f:8d:6a:9e:1c:55:c5:db:d4:91:b5:99:b7:ab:b8: c9:a0:37:5f:aa:a6:35:01:86:15:71:ec:13:cc:5c: ce:67:a1:94:35:ad:ef:d5:31:78:fc:45:b4:f7:af: 17:72:99:9a:0d:24:69:60:b5:bf:5c:f6:7a:e4:7b: 9c:5a:a7:c9:73:e2:e9:5b:38:0c:eb:6c:86:b2:2f: 0f:01:0e:3d:e2:82:2b:27:65:13:2f:cf:13:f4:bd: a9:08:30:dc:ee:f0:60:d0:69:1f:c4:21:af:96:51: 66:7d:2b:20:07:79:77:dd:2c:1f:47:57:6a:7b:33: af:1c:d1:c9:30:e2:f5:86:d3:46:7c:73:79:7e:9a: b1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:1D:E9:35:3B:A0:A3:B7:36:77:78:41:F2:42:F3:37:E1:6E:B5:EF X509v3 Authority Key Identifier: keyid:FC:A5:5F:E6:8B:F1:47:AE:20:F0:0C:45:DA:DC:DF:96:0C:12:0C:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:6f:83:b3:97:9a:5b:0e:f5:c8:d1:23:bb:a8:5f:ab:25:83: 46:41:f9:5c:2c:0a:67:16:5d:2c:4c:77:d9:79:87:e9:6f:2b: 5a:8b:8e:2d:34:3e:f4:7f:08:24:36:8b:35:41:bd:0f:f1:8a: 55:78:a8:9b:59:72:8d:f2:5d:03:80:24:56:46:11:e1:49:c6: fc:74:2e:4f:0d:35:0d:36:87:1a:22:2f:21:41:93:6e:87:b5: 20:7b:dc:cc:7d:68:96:29:9c:2e:06:4f:1a:4b:4a:da:cd:e7: d8:de:fd:34:a2:a9:ba:4b:16:54:ea:bf:6b:24:2d:94:36:53: fb:7e:31:26:f0:e4:63:3e:cc:76:5c:29:47:79:20:21:31:2d: 1d:74:3a:64:a4:d3:a3:47:34:ac:35:49:a0:97:0a:7a:06:bb: 1e:bb:a0:78:b3:0a:57:35:31:28:c6:dc:cc:6b:67:8d:8f:0a: c0:69:22:28:73:22:1f:3d:59:ff:ab:39:f3:79:e6:ee:1c:73: 9b:78:64:36:cf:a9:2b:39:17:2b:9c:09:42:2e:79:66:c7:7d: b9:08:b9:53:06:ae:e2:11:5f:bc:a2:18:23:ee:83:99:6f:de: 5f:40:ca:66:26:da:6d:cd:06:f1:75:05:ab:55:91:39:f4:c0: ab:44:8d:99 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITQZl6Pi8hevjZ2Tc1MvVLNP68djANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhGQ0E1NUZFNjhCRjE0N0FFMjBGMDBDNDVEQURDREY5NjBD MTIwQ0Y4MB4XDTI1MDYxNTA5NTcwN1oXDTI1MDYxODEwMDcwN1owMzExMC8GA1UE AxMoNzkxREU5MzUzQkEwQTNCNzM2Nzc3ODQxRjI0MkYzMzdFMTZFQjVFRjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMTRx6lfeMdO7/QWvTTG0ojFVDu8 php5R1ezLkO7/S0Eq0+7HkyidFetD+VTVY3vRoFj7XAeKFGupt0ERcEdDMdMNoMb h8xHKZgDjhYzqgEN7EnOmm3aFNMabNbKBOyxuURpLRzJxfwEUVRIftQbuSh7tdM1 eChVf41qnhxVxdvUkbWZt6u4yaA3X6qmNQGGFXHsE8xczmehlDWt79UxePxFtPev F3KZmg0kaWC1v1z2euR7nFqnyXPi6Vs4DOtshrIvDwEOPeKCKydlEy/PE/S9qQgw 3O7wYNBpH8Qhr5ZRZn0rIAd5d90sH0dXanszrxzRyTDi9YbTRnxzeX6asdUCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBR5Hek1O6CjtzZ3eEHyQvM34W617zAfBgNVHSME GDAWgBT8pV/mi/FHriDwDEXa3N+WDBIM+DAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc5 NWVlOGZjLTZlZmUtNDE1ZC1iNmMxLTBmMGNjY2YyNjE0NC8wL0ZDQTU1RkU2OEJG MTQ3QUUyMEYwMEM0NURBRENERjk2MEMxMjBDRjguY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi9GQ0E1NUZFNjhCRjE0N0FFMjBGMDBDNDVEQURDREY5NjBDMTIw Q0Y4LmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83OTVlZThmYy02ZWZlLTQxNWQtYjZj MS0wZjBjY2NmMjYxNDQvMC9GQ0E1NUZFNjhCRjE0N0FFMjBGMDBDNDVEQURDREY5 NjBDMTIwQ0Y4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAcG+Ds5eaWw71yNEju6hfqyWDRkH5XCwKZxZd LEx32XmH6W8rWouOLTQ+9H8IJDaLNUG9D/GKVXiom1lyjfJdA4AkVkYR4UnG/HQu Tw01DTaHGiIvIUGTboe1IHvczH1olimcLgZPGktK2s3n2N79NKKpuksWVOq/ayQt lDZT+34xJvDkYz7MdlwpR3kgITEtHXQ6ZKTTo0c0rDVJoJcKega7HrugeLMKVzUx KMbczGtnjY8KwGkiKHMiHz1Z/6s583nm7hxzm3hkNs+pKzkXK5wJQi55Zsd9uQi5 Uwau4hFfvKIYI+6DmW/eX0DKZibabc0G8XUFq1WROfTAq0SNmQ== -----END CERTIFICATE-----Generated at Mon Jun 16 20:56:12 2025 by rpki-client